I have added the ability to create xen_var_log_t. Allowing udev to load system
modules is a bad idea. (If I can install a system module, I can probably take
over the machine.)
The other fixes will be in selinux-policy-2.6.4-17